Multiparty Quantum Communication 

Harry Buhrman* Wim van Dam* Peter H0yer^ 

March 31, 1999 



Complexity 

Alain Tapp§ 



Abstract 

Quantum entanglement cannot be used to achieve direct communication between remote 
parties, but it can reduce the communication needed for some problems. Let each of k 
parties hold some partial input data to some fixed fc-variable function /. The communication 
complexity of / is the minimum number of classical bits required to be broadcasted for every 
party to know the value of / on their inputs. 

We construct a function G such that for the one-round communication model and three 
parties, G can be computed with n + 1 bits of communication when the parties share prior 
entanglement. We then show that without entangled particles, the one-round communication 
complexity of G is (3/2)n + 1. Next we generalize this function to a function F. We show that 
if the parties share prior quantum entanglement, then the communication complexity of F is 
exactly k. We also show that if no entangled particles are provided, then the communication 
complexity of F is roughly fclog 2 k. 

These two results prove for the first time communication complexity separations better 
than a constant number of bits. 

PACS numbers: 03.67.Hk 

1 Introduction 

Suppose each of k parties holds some data that is unknown to the others, and they want to evaluate 
some fixed fc-variable function on those data. If the function is non-trivial, then this cannot be 
done unless the parties communicate. 

In [Q, Cleve and Buhrman raised the question whether or not less communication is needed 
if the parties possess entangled particles. They demonstrated that, for a specific problem, prior 
quantum entanglement decreases the need for communication by 1 bit from 3 to 2 bits. A 1-bit 
saving was also obtained by Buhrman, Cleve, and van Dam in Q for another problem where each 
party initially holds a 2-bit input-string. In both of these problems, there are 3 parties (k = 3). 
They left open the important question if a separation larger than 1 bit is possible. In particular, 
is a separation in an asymptotic setting possible? In this article we show that this is indeed the 
case. 

Let / be a /c-variable Boolean function whose inputs are n-bit binary strings (that is, / : X k — > 
{0, 1} where X — {0, 1}™). There are k parties, denoted Pi, ... , Pfc, where party holds input 
data Xi (i = 1, . . . , k). Initially, party Pi only knows Xi, so, to evaluate /, the parties have to 
communicate among each other. The communication is done by broadcasting classical bits, where, 
each time, a party broadcasts one bit to everybody, on the total cost of one bit of communication. 
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We are interested in determining the minimum number of bits required to be broadcasted in 
the worst-case for every party to know the value of /. This number is called the communication 
complexity of f and is denoted C(f,k,n). We want to compare this number with Q(f,k,n), the 
communication complexity of / with prior quantum entanglement. That is, the situation where 
we allow the parties to share a set of entangled particles before they learn their inputs ^ . 

For example, with this terminology, the separation obtained in Q reads: there exists a 3- 
variable (k = 3) Boolean function g whose inputs are 2-bit strings (n — 2), and for which 
C(g,3,2) = 3, but Q(g, 3,2) = 2. For some functions, no separation at all is possible. For 
example, Cleve et al. [|3j showed that prior quantum entanglement does not help in computing the 
so-called inner product function. 

References jl], |[ left open the very interesting question if a separation in an asymptotic setting 
is possible. This question can be phrased more formal as: Does there exists a function / for which 
C(f,k,n) grows in k or n, and for which the ratio between C(/, fc,n) and Q(f 1 k,n) is bounded 
from below by some constant larger than 1? 

In this paper, we first study the case where the number of parties is three (k = 3). In this setting 
we consider the one-round communication model where each party is allowed to communicate 
at most once. We construct a Boolean function G for which C(G,3,n) = (3/2)n + 1 whereas 
Q(G, 3, n) — n + 1. This gives a separation by a factor of 3/2 in terms of the number of bits hold 
by each of the three parties. 

Next we relax the requirement that only one round of communication is allowed and consider 
an arbitrary number of parties. To this end we generalize the communication function G to F. 
We demonstrate that the communication complexity of F with prior quantum entanglement is 
exactly k [that is, Q{F, fc,n) = k], but that, if n > log 2 k 7 then without quantum entanglement it 
is roughly k log 2 k [that is, C{F, k,n) ~ k log 2 k]. We prove this by giving upper and lower bounds 
in both cases. This implies a separation by a logarithmic factor in k, the number of parties. 

This paper thus presents a function with a separation by a constant factor in terms of the 
number of bits, and a function with a separation by a logarithmic factor in terms of the number 
of parties. Very recently, much more impressive separations have been obtained in terms of the 
number of bits. Buhrman, Cleve, and Wigderson Q, Ambainis et al. Q, and Raz Q have all 
found two-party computational problems for which an exponential separation holds. 



2 The Modulo-4 Sum Problem 

In this section, we fix the number of parties to three (k — 3). As common, we name the parties 
Alice, Bob, and Carol. 

In 0], Buhrman, Cleve, and van Dam considered the Modulo-4 Sum Problem defined as follows. 
Alice, Bob, and Carol receive x, y, and z, respectively, where x,y,z GU — {0,1,2,3}, and they 
are promised that 

(x + y + z) mod 2 = 0. (1) 
The common goal is for every party to learn the value of the function 

f{x,y,z) = i (x + y + z) mod 4 . (2) 

We say that (x,y,z) £ U x U x U is a valid input if Eq. |l| holds. The function / : U x U x U — > {Q, 1} 
can be viewed as computing the second-least significant bit in the sum of x, y, and z. Note that 
for all inputs y, z E U to Bob and Carol, there exists a unique input x 6 U for Alice such that 
{x, y, z) is a valid input and f{x, y, z) — 1. 

For every integer m > 1, we generalize / to G m : U m x U m x U m — > {0, 1} by setting 

G m (x, y, z) = 1 if and only if for all 1 < i < m we have f(xt, yi, Zi) = 1, 

where x = (x\, . . . , x m ), y = (yi, . . . , y m ), and z = (z\, . . . , z m ), and with the condition that, 

(xi + yi + zi) mod 2 = (1 < i < m). (3) 
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Thus, we give Alice, Bob, and Carol m valid instances of /, all at the same time, and ask if they 
all evaluate to 1. Again, we say that (x, y, z) is a valid input if Eq. ^| holds. 

Buhrman et al. showed that with prior entanglement, function / can be solved with one- 
round communication using 3 bits. In their protocol, Bob and Carol each broadcast one bit, where 
after Alice is capable of computing the value of / and then broadcasting the resulting bit. (See 



Section 3.1 for a direct generalization of their protocol.) Their protocol therefore immediately 



yields a 2m + 1 bits protocol for G m . 

Theorem 1 With prior quantum entanglement G m can be solved with one-round communica- 
tion using 2m + 1 bits. 



In Subsection 2.2 below, we prove the following lower bound for the case that we do not allow 



quantum entanglement. 

Theorem 2 Without quantum entanglement, there is no one-round protocol for G m that uses 
less than 3m + 1 bits of communication. 

For one-round protocols we thus archive a separation of 2m + 1 bits against 3m + 1 bits. We 
do not know the classical communication complexity of computing G m without any restriction on 
the number of rounds. 



2.1 Classical Upper Bound 

The lower bound in Theorem 2 is tight as there is a straightforward one-round protocol that 
computes G m with 3m + 1 bits of communication. It is instructive for understanding the proof of 
our lower bound, first to understand that protocol. 

Consider an input x £ U m to Alice. We can think of x = (x±, . . . , x m ) as consisting of two 
parts, the high bits and the low bits. That is, we identify x with the pair (x^igh , xi ow ) , where the 
«-th coordinate in x^gh £ {0, l} m is (xj div 2), and where the z-th coordinate in X[ ow £ {0, l} m 
is (xi mod 2). We think of Bob's input y = (yi, . . . , y m ) and Carol's input z = (zi, . . . , z m ) in a 
similar manner. 

The 3m + 1 one-round protocol works as follows: First Bob broadcasts all 2m bits of his input 
(yhigh , yiow ) ■ Then Carol broadcasts the m high bits Zhigh of her input. Now Alice is capable of 
computing the value of / on all m instances, that is, she can compute f(xi, yi, Zi) for all 1 < i < m. 
Due to the promise that (xi + yi + Zi) mod 2 = 0, she does not need the low bits z\ ow of Carol's 
input. Finally Alice checks if f(xi,yi,Zi) = 1 for all 1 < i < m. If so, G m (x, y, z) = 1 and Alice 
therefore broadcasts 1, otherwise she broadcasts 0. 

Intuitively, Alice has to have all of Bob's m high bits, all of Carol's m high bits, but just m of 
the 2m low bits. Hence, intuitively, if there exists a protocol for G m in which Bob broadcasts Sb 
bits and Carol broadcasts sc bits, then sg should be at least m, sp at least m, and sg + sq at 
least 3m. It is the result of the following subsection that this intuition is valid. 



2.2 Classical Lower Bound 

We now prove our lower bound stated in Theorem 2. Since we only consider one-round protocols, 
we can without loss of generality assume that any protocol computing G m is made up of the 
following three parts: 

1. Bob (knowing only his input y) broadcasts the message as = cs(y)- 

2. Carol (knowing her input z and Bob's message <jb) broadcasts the message crc = cc( z 7 cb)- 

3. Alice (knowing x, ob, and crc) computes the answer cta(x, &b, crc) £ {0, 1} which she then 
broadcasts to Bob and Carol. Since this protocol computes G m , we can without loss of 
generality assume that a a — G m on all valid inputs. 
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In agreement with our intuition described above, the following key lemma explicitly specifies 
2 3m different inputs on which Bob and/or Carol have to send different messages. Theorem 2 is 
immediate. 

Lemma 1 Consider the above one-round protocol for computing G m . Let ob &nd oc denote 
Bob's and Carol's messages on inputs y = (yhigh, yiow) and z = (zhigh, yiow), respectively. Let 
o' B and o' c denote Bob's and Carol's messages on inputs y' = (y high , y{ ow ) and z' = (z high , y( ow ), 
respectively. Then the following holds. 

(i) If Yhigh ^ Yhigh and yiow = y( ow , then o B ^o' B . 

(ii) If z high ^ z hi g h and yiow = yi ow , then o c ^ cj' c . 
(Hi) If y low ^ y[ ow , then <r B ^ o' B or a c ^o' c . 

We first prove (i) by contradiction. Assume yhigh 7^ yJiigh' yiow = yi' OW ' ano - 17 b = o' B . Let x be 
the unique input to Alice such that G m (x, y, z) = I. Then (x, y', z) = (x, (y h i g hJ yiow), z) is a valid 
input on which G m takes the value 0. But, since <jb — o' B , we also have <jc(z,itb) = o' c (z, a B ), 
and hence Alice incorrectly outputs the same answer ovl(x, <jb, oc) = oa(x, o' B , o' c ) m both cases. 
Thus, the assumption is wrong and (i) holds. 

The proof of (ii) is almost identical to the proof of (i), and we therefore omit it. 

We also prove (hi) by contradiction. Assume yi ow ^ y[ ow , ob = o' B , and oq — o' c . Let 
x = (xhigh, 0) be the unique input to Alice such that G m (x, y, z) = I. Since the protocol correctly 
computes G m , then Alice must answer 1 on the input (x, y,z). But then (x, y',z') is also a valid 
input on which Alice answers 1. Further, let x' = (x h i g h, x iow) ^ e the unique input to Alice such 
that G m (x',y',z) = I. Since the protocol correctly computes G m , then Alice must answer 1 on 
the input (x',y',z). But then (x',y, z') is also a valid input on which Alice answers I. 

Thus, Alice answers 1 on all of these 4 valid inputs: (x, y, z), (x, y', z'), (x', y', z), and (x', y, z'). 
But, since yi ow 7^ y[ ow i then (as we show in the next paragraph) G m takes the value on at least 
one of the valid inputs (x, y',z') and (x',y,z'), and thus the protocol incorrectly computes G m . 
Hence, the assumption is wrong and (iii) follows. 

To see that G m has to take the value on at least one of the valid inputs (x, y',z') and 
(x',y, z'), assume otherwise. Let I < i < m be a coordinate where yi ow and y[ ow differ. For ease 
of notation, we let y\ ow denote the z-th coordinate (bit) of yi ow G {0, 1} m , and we use similar 
notation for the i-th coordinate of the other vectors. 

• Since G m (x, y, z) = 1, then (x high + y high + z high + y low ) mod 2 = 0. 

• Since G m (x', y', z) = I, then (x' high + y' high + z high + I) mod 2 = 0. 

• Since G m (x, y', z') = I, then (x high + y' high + z high + y[ ow ) mod 2 = 0. 

• Since G m (x', y, z') = I, then (x' high + y hig h + z^ igh + I) mod 2 = 0. 

But all of these 4 equations cannot hold at the same time, and thus the assumption that G m takes 
the value I on (x, y', z') and (x', y, z') is wrong. This completes our proof of Lemma 1, from which 
Theorem 2 immediately follows. 

It is worthy noticing that, by Lemma 1, for Alice to correctly output the value of G m , she has 
to be able to correctly compute / on every one of the m instances of /. This is in general not 
so, and it is a deep open question in communication complexity to characterize the functions that 
possess this property. 

3 Multi- Rounds and Parties 

We now generalize / defined in Eq. |to a function F which we shall use to prove a separation in 
terms of the number of parties. There are k parties, where party Pi obtains input data Xi € V = 
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{0, . . . , 2" — 1} (i = 1, . . . , k). We say that an input x = (xi, . . . , x^) is valid if it satisfies that 

(X^M mod 2 " _1 = °- W 
Let F : V k — > {0, 1} denote the Boolean function on the valid inputs defined by 

We say that a valid input x is b-valid if F(x) = b (b = 0, f ). The function F can be viewed as 
computing the n-th least significant bit of the sum of the x^s. 

We first show that with prior quantum entanglement, k bits of communication are necessary 
and sufficient for every party to evaluate F. That is, for all k > 2 and n > 1, 

Q{F,k,n) = k. (6) 

Then, we show how the parties can evaluate F with roughly k log 2 k bits of communication without 
using any entangled particles. Specifically, for all k > 2 and rc > 1, 

C(F, k, n)<(k- 1){ riog 2 (fc - 1)1 + 1} + 1. (7) 

Finally, we prove that this is optimal up to low order terms by showing that, for all k > 2 and 
n > log 2 k, 

C(F,k,n) > fclog 2 (fc) - k. (8) 

By comparing the bounds of Eqs. || and ||, we see that we have established a separation by a factor 
of log 2 (fc/2). 

3.1 With Entanglement 

We first show that if the parties share entangled particles, then in a straight-forward manner, 
the k parties can evaluate F using only one bit of communication each. This is obtained by a 
direct generalization of the idea used both in Sect. 2.1 of (which itself is based on the work of 
Mermin |t| ) and in || . The prior quantum entanglement shared by the k parties is the cat state 
\qi . . .qk) — (|0 . . . 0) + |1 . . . 1})/V2, where party Pj holds qubit qi (i = 1, .. . , k). 

Each party Pi uses the following procedure. First party Pi applies a phase-change operator 
(f){xi) defined by |0) i— > |0) and |1) i— > exp(27TXi-y^T/2™)|l) on her qubit Thanks to the 
promise on the inputs, these phase rotations add up so that the resulting state is (|0...0) + 
(— 1) F ( X )|1 . . . l))/\/2. Then she applies the Walsh-Hadamard transform that maps |0) to (|0) + 
|1))/V2, and |1) to (|0) - \1))/V2. Finally, she measures her qubit in the computational basis 
{|0), |1)} and broadcasts the outcoming bit. 

Let bi be the outcome of party Pi's measurement. Simple calculations show that bi © • • • ffi bu 
equals F(xi, . . . ,Xk), where © denotes addition in modulo-2 arithmetic. It follows that every 
party can compute the value of F from the k communicated bits. On the other hand, k bits of 
communication are necessary since if one of the parties does not broadcast any bits, then none of 
the others can determine the value of F. To see this, note that if we toggle the most significant 
bit of any one of the inputs, then the value of F changes. Equation |s| follows. 



mod 2 r ' 



(5) 



3.2 Without Entanglement 

The simplest way to evaluate the function F 
inputs. The last party then evaluates F(xi,. 
others. Hence, the communication complexity 



is for all but one of the parties to broadcast their 
. . ,Xk) and communicates the resulting bit to the 
(without entanglement) is at most (fc — l)n + 1. 
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Now, consider that all but one of the parties broadcast the d most significant bits of their 
inputs, for some integer d > 1. The last party, say Pk, then computes the sum — ^ 

where 



fe-i 



S = ^(xi mod 2™- 

Suppose n > d where d = 1 + |~log 2 (fc — 1)] . Then 

0<6< (fc-f)(2"- d -f) <2 n_1 , 

so party Pk knows the value of the sum 2i=i x i U P *° an additional non-negative term strictly 
smaller than 2" _1 . Since the sum is divisible by 2™~ 1 for all valid inputs, party Pk can determine 
it exactly and thus compute the value of F. It follows that (fc — l)d + 1 bits of communication 
suffice, as stated as Eq. 0. 

A good method to prove lower bounds for the communication complexity of functions comes 
from a combinatorial view on the protocol for the communication. Consider the space V k of all 
possible inputs, where V = {0, ...,2" — 1}. A rectangle in V k is a subset R C V k such that 
R = Ri X • • • X Rk for some R4 C V {i = 1, . . . , k). If a rectangle contains no 0- valid inputs or no 
1- valid inputs, then it is said to be F- monochromatic. 

We now use the observation that every deterministic and errorless communication protocol 
corresponds to a covering of all the valid inputs in V k by F-monochromatic rectangles (see Q). 
Without increasing the communication complexity, such a protocol can always be transformed 
into a protocol that uses a partitioning that covers all of V k , and for which each monochromatic 
rectangle contains at least one valid input. By proving that every such partition requires at least 
t rectangles, we also prove that the communication complexity of F is at least log 2 t ||. Hence, 
upper bounds on the cardinality of the possible ^-monochromatic rectangles imply a lower bound 
on the communication complexity of F. 

In the appendix, we prove that if a rectangle R C V k is ^-monochromatic and if R contains a 
valid input, then its cardinality is upper bounded by a value r, for which 



+ 1) ■ (9) 

Since there are 2 nk input values to be covered, this bound on the size of the rectangles shows that 
we need at least t = 2 nk jr rectangles to partition V k in the above described fashion. 
If n > log 2 k and k > 2, then basic algebra gives that 

/ 2 nk \ 

log 2 t = log 2 f — J > fclog 2 (fc) - k. 
From this, the lower bound on the communication complexity of Eq. @ follows. 
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Appendix: Upper Bound on the Cardinality of a Mono- 
chromatic Rectangle 

Equip the set V = {0, . . . , 2™ — 1} with the natural addition operation, denoted © and given by 
x © y = (x + y) mod 2 ra . Then V = (V, ffi) is a cyclic group of order 2™. 

Let R C V k be a fixed rectangle. By definition, R = Ri x • • • x R^ for some subsets Ri C V, 
i = l,...,k. For any two subsets A, B C V, define 4®B = {flffli | a e 4 fee 5}. We now 
define a family of subsets of V. Set So = {0} C V and Si = Si-i © Ri for i = 1, . . . , fc. Then 
for each element (aci, .. . , € i?, the value (X^i=i x i) m °d 2™ is in Sk- We shall use Kneser's 
theorem [ fl0| to give an upper bound on the cardinality of R. 

Kneser's theorem Let G = (G, ©) be an Abelian group with finite subsets A and B. Then 
there exists a subgroup H of G such that 

A®B®H=A®B 

and 

\A@B\ > \A®H\ + \B®H\ - \H\. 



Let Hi be the largest subgroup of V for which Si = Si ® Hi, [i — 0,...,k). Since © is 
associative, then Hi_\ C Hi for all 1 < i < k. 

Suppose R is a monochromatic rectangle that contains a valid input. Without loss of generality, 
assume that it is a 0-valid input, that is, that € Sk- Then Hi is the trivial subgroup {0} for 
all i, since otherwise we have that 2 n_1 G Hi C if*, and hence R would not be monochromatic. 
This shows that if we identify A — Si-i and B = Ri in Kneser's theorem, it follows that H is the 
trivial subgroup. We therefore have that \Si\ > \Si-i\ + \Ri\ — 1, so 

k 

|5 fc |>£|J2,|-(A-l). 

Since 2 71 " 1 ^ 5 fe , then |S fe | < 2" - 1, so 

fc 

^2\Ri\ < 2 n - 2 + k, 

i=l 

and therefore 

i^i = ni*i^(nb- ? + 1 ) • 

1=1 v 7 

It follows that the right hand side of Eq. |^ is an upper bound on the cardinality of any F- 
monochromatic rectangle that contains a valid input. 
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